Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/F2B741AE1EC211F1A3DB35A9DAE4EC9C.roa
File: F2B741AE1EC211F1A3DB35A9DAE4EC9C.roa (raw, json)
Hash identifier: wNGAjIUP8OIxnYbE9SkgsQ9UkCWPS1lv4jOwO2xoulg=
Subject key identifier: 30:24:FE:BB:DA:27:51:61:6E:41:B5:0D:36:99:A7:19:49:0A:E5:08
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 047B
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/F2B741AE1EC211F1A3DB35A9DAE4EC9C.roa
Signing time: Fri 13 Mar 2026 09:56:47 +0000
ROA not before: Fri 13 Mar 2026 09:56:42 +0000
ROA not after: Fri 14 Mar 2036 09:56:42 +0000
asID: 30986
IP address blocks: 154.160.32.0/20 maxlen: 24
154.160.48.0/20 maxlen: 24
154.160.64.0/20 maxlen: 24
154.160.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 29 Mar 2026 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147 (0x47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Validity
Not Before: Mar 13 09:56:42 2026 GMT
Not After : Mar 14 09:56:42 2036 GMT
Subject: CN=69b3df5f-955a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:c9:06:28:bc:ea:9c:d6:00:7b:b4:a2:a1:
fc:f9:72:63:ec:46:49:ce:c8:a7:b5:bc:11:d2:6e:
7c:16:79:47:a4:50:d5:4d:cb:ea:90:6b:d8:16:82:
aa:bb:2d:eb:ec:51:58:db:55:d7:25:98:d0:21:fe:
14:ec:09:51:e1:51:50:ae:53:72:96:a6:e7:6d:a9:
78:c3:50:58:92:29:ec:18:0c:66:72:96:20:cc:88:
bf:3c:c3:ee:92:60:4d:8d:02:c8:d1:6d:e0:7f:ef:
89:b1:41:b2:88:a0:ac:5f:a4:82:c7:1d:99:f0:8f:
c5:c6:60:9e:57:14:be:4f:e1:79:33:94:d3:49:0e:
a6:f5:09:bf:02:72:9a:c2:83:23:28:28:33:50:81:
b1:a9:7c:e6:8c:74:a2:d7:73:08:1b:7e:d6:99:3a:
52:2e:d5:bd:4c:a7:05:33:78:75:a2:77:fb:49:9c:
9f:8a:49:cd:8f:55:8d:8a:37:1b:f3:ae:d4:d8:f5:
b7:93:b1:ca:dc:1b:be:c9:c5:b1:35:af:c7:13:53:
bd:c3:dd:2a:25:b9:3a:91:b0:73:15:e5:23:f1:da:
25:9d:5d:b5:fb:20:ac:de:69:64:c5:fd:e7:02:14:
fa:e4:6d:f0:20:c7:95:f2:79:25:04:1a:7c:8f:31:
dd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:FE:BB:DA:27:51:61:6E:41:B5:0D:36:99:A7:19:49:0A:E5:08
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/F2B741AE1EC211F1A3DB35A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.160.32.0-154.160.95.255
Signature Algorithm: sha256WithRSAEncryption
27:d9:7a:f7:63:e3:ba:ef:ac:a9:90:6a:5e:e4:4a:a7:77:f8:
90:ef:14:97:1a:2e:b0:d9:ef:e1:77:70:01:27:df:22:53:37:
1e:26:74:69:80:62:f0:59:0f:bc:fc:59:2c:22:10:52:2f:70:
f5:c2:41:bf:7a:71:fe:6d:ac:f8:52:4d:9d:6b:af:44:9b:ae:
25:6c:dc:af:7e:87:aa:2b:15:3c:59:49:5a:e6:a9:4a:43:ba:
74:6e:30:08:b0:04:63:ac:8b:7e:92:5e:be:5c:f3:dc:6f:48:
9d:70:97:5c:ef:80:b6:51:66:77:ac:79:e0:12:19:85:4f:7f:
81:6c:e7:43:01:d9:ff:ac:09:a0:38:dd:3b:59:ad:fd:4f:76:
eb:dc:d5:66:ca:a5:fb:52:09:a6:0a:2c:72:3e:ba:f9:ae:7b:
b3:23:83:3a:65:33:83:c8:26:6c:d7:2f:e0:be:50:66:3d:c7:
62:ad:5b:0b:01:6e:dc:9b:61:75:c8:d7:5c:37:bb:bf:03:93:
29:84:93:04:6a:28:93:cb:fb:ee:89:94:60:28:48:0c:2f:f2:
36:7e:51:4d:4a:d5:07:53:66:5a:65:93:17:8a:3e:3b:96:df:
75:58:73:10:f1:64:f4:84:91:48:24:c6:7f:2f:2b:08:6b:e7:
f8:37:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:37:06 2026 by rpki-client